If the VSE Access Protection Rule Prevent user rights policies from being altered is enabled, it prevents computers that run Windows 7 or 2008 R2 from joining a domain.
When the checkbox to Report has also been selected, a message similar to the one below is reported in the Access Protection log:
Blocked by Access Protection rule <Domain>\<User> C:\Windows\system32\svchost.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Lsa\OfflineJoin Anti-virus Standard Protection:Prevent user rights policies from being altered Action blocked : Create
